This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/YEIy-4popFF63uiUMaqEq6MP2-k.roa File: YEIy-4popFF63uiUMaqEq6MP2-k.roa (raw, json) Hash identifier: gVX7vNZdK/HpIGkA/+EuEhyy05rdK5xmjj38Yi11muE= Subject key identifier: 60:42:32:FB:8A:68:A4:51:7A:DE:E8:94:31:AA:84:AB:A3:0F:DB:E9 Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019B7DCB24C06281B01036F2C5C1E7453DDC Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/YEIy-4popFF63uiUMaqEq6MP2-k.roa Signing time: Fri 02 Jan 2026 08:20:23 +0000 ROA not before: Fri 02 Jan 2026 08:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8368 IP address blocks: 82.150.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:24:c0:62:81:b0:10:36:f2:c5:c1:e7:45:3d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Jan 2 08:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=604232fb8a68a4517adee89431aa84aba30fdbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:85:f3:a6:01:3f:b4:1b:5b:bb:4b:52:99:b4: 09:e7:b7:34:7a:d2:17:03:49:99:30:54:35:f0:f6: e5:29:06:73:bf:67:63:61:88:1b:00:60:b7:09:f9: b0:e0:2a:73:b7:de:7e:75:21:5f:4a:80:bb:8b:59: 2e:06:ac:e6:29:7e:66:23:4c:23:2f:fd:26:0c:7a: 1b:c4:d2:9b:fc:88:77:62:95:8e:2d:0a:36:db:99: b4:5f:3e:03:e0:91:e3:2e:7b:f0:b2:45:29:b5:75: 4a:71:ac:dc:b7:78:e2:e9:e9:c0:4e:e7:04:22:3d: c8:39:f4:74:ce:de:84:a9:da:3f:6e:8a:49:d9:38: 04:a9:3d:51:c6:23:22:48:12:a4:88:29:a8:ae:60: 55:7a:93:aa:b9:e3:e3:89:86:93:4d:92:99:7f:ed: 2a:b2:96:61:f6:17:bc:65:8b:95:80:0a:10:a7:17: f5:c2:7d:c3:50:55:cb:79:06:e2:56:ec:72:98:0f: dc:1d:ce:d3:8e:c4:20:d3:11:ef:6e:29:2d:6e:d7: a3:47:74:83:d5:94:aa:8f:c2:ef:6d:03:de:60:b7: 9c:d7:52:77:61:f0:43:16:6c:f2:a2:27:61:19:42: c1:8c:48:b1:c4:41:67:cf:3b:23:ad:47:c4:5e:56: 12:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:42:32:FB:8A:68:A4:51:7A:DE:E8:94:31:AA:84:AB:A3:0F:DB:E9 X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/YEIy-4popFF63uiUMaqEq6MP2-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.150.128.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:67:15:95:d2:a6:12:c8:ed:44:ab:ba:49:10:e9:e9:57:56: bd:a2:11:b5:39:51:fa:31:5e:6d:ab:1f:2b:f4:78:59:f7:6d: de:57:34:ea:b4:da:2c:c8:43:a8:6b:0e:18:44:ad:2c:22:01: 69:12:08:be:4d:d4:8c:f3:77:aa:50:3a:f4:41:81:ee:8f:8f: d9:0b:16:9c:32:2b:59:3b:2b:0c:fc:1a:b2:5c:73:78:b2:fd: 64:2f:2f:74:1a:45:bd:50:22:a1:2b:49:03:e1:97:3c:1d:d6: 9e:74:e4:45:61:b3:c7:c9:9b:f6:0a:9b:3e:bb:4e:0b:1d:bc: 67:44:03:37:dd:a2:8f:b7:ad:78:a5:c1:0a:16:e7:5b:35:47: c2:37:ae:35:7d:f6:33:78:d9:a9:18:77:14:62:0d:79:5a:ac: 13:eb:4a:a9:bd:0a:61:97:8b:5b:17:8b:f0:2c:3d:db:3d:57: 35:69:c5:a8:28:98:53:e8:ef:fe:99:62:6d:7e:f8:5d:c4:e5: bc:c7:f5:49:99:2a:63:cd:51:5b:08:88:55:9d:e2:64:ef:05: 05:13:8f:d1:8b:4d:ec:e5:a6:e1:76:22:63:0d:d4:1d:67:67: a6:59:4e:97:60:b9:93:ac:e2:bd:2f:5b:e2:00:01:29:8e:77: 12:d4:9d:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yyTAYoGwEDbyxcHnRT3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjYwMTAyMDgyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDQyMzJmYjhhNjhhNDUxN2FkZWU4OTQzMWFhODRhYmEzMGZkYmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4XzpgE/tBtbu0tSmbQJ57c0etIX A0mZMFQ18PblKQZzv2djYYgbAGC3Cfmw4Cpzt95+dSFfSoC7i1kuBqzmKX5mI0wj L/0mDHobxNKb/Ih3YpWOLQo225m0Xz4D4JHjLnvwskUptXVKcazct3ji6enATucE Ij3IOfR0zt6Eqdo/bopJ2TgEqT1RxiMiSBKkiCmormBVepOquePjiYaTTZKZf+0q spZh9he8ZYuVgAoQpxf1wn3DUFXLeQbiVuxymA/cHc7TjsQg0xHvbiktbtejR3SD 1ZSqj8LvbQPeYLec11J3YfBDFmzyoidhGULBjEixxEFnzzsjrUfEXlYS7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGBCMvuKaKRRet7olDGqhKujD9vpMB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvWUVJeS00cG9wRkY2M3VpVU1hcUVxNk1QMi1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUpaAMA0G CSqGSIb3DQEBCwUAA4IBAQBMZxWV0qYSyO1Eq7pJEOnpV1a9ohG1OVH6MV5tqx8r 9HhZ923eVzTqtNosyEOoaw4YRK0sIgFpEgi+TdSM83eqUDr0QYHuj4/ZCxacMitZ OysM/BqyXHN4sv1kLy90GkW9UCKhK0kD4Zc8HdaedORFYbPHyZv2Cps+u04LHbxn RAM33aKPt614pcEKFudbNUfCN641ffYzeNmpGHcUYg15WqwT60qpvQphl4tbF4vw LD3bPVc1acWoKJhT6O/+mWJtfvhdxOW8x/VJmSpjzVFbCIhVneJk7wUFE4/Ri03s 5abhdiJjDdQdZ2emWU6XYLmTrOK9L1viAAEpjncS1J3K -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:23 2026 by rpki-client